Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          wIQVlLDiV9+MCV/jVtyeeuarZSeYRh9WoxiowV1UA7g=
Subject key identifier:   DF:29:FD:F0:8A:04:90:62:C9:9D:3C:23:3E:BF:E6:53:DA:05:AD:C1
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       019D9B19A93F161784E23704E7417E290844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0D57
Signing time:             Fri 17 Apr 2026 11:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:43 +0000
Files and hashes:         1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: SOyQ3AgJsQywTD2OBRX1rvev/eciuU06DB/Pz5KEY8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:a9:3f:16:17:84:e2:37:04:e7:41:7e:29:08:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Apr 17 11:00:43 2026 GMT
            Not After : Apr 18 11:00:43 2026 GMT
        Subject: CN=df29fdf08a049062c99d3c233ebfe653da05adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:f2:83:aa:30:a5:8c:4a:b6:fa:07:02:61:
                    07:5b:49:91:2b:5a:9d:39:92:1a:06:e0:dc:8b:2d:
                    da:b5:17:0c:4a:48:73:b2:f1:77:97:22:83:fb:71:
                    0c:b0:01:c4:f7:59:3e:00:e2:e9:bd:33:98:47:e4:
                    1f:06:c4:5b:fc:55:b9:97:f5:9c:ac:6b:f7:ad:06:
                    91:4d:fb:5b:d9:ad:01:ae:af:72:97:b9:94:2c:6d:
                    d0:d9:d9:85:9f:53:5f:18:f0:2f:3b:ae:01:a1:8a:
                    e6:e7:1c:92:58:5d:cd:18:57:b1:0b:31:48:b2:ea:
                    fa:2d:bf:d5:6d:56:f1:47:63:5d:20:3f:d8:2e:39:
                    1c:eb:36:ad:b5:de:99:68:21:21:ad:23:57:f1:bd:
                    ca:53:19:46:89:a7:fe:bb:10:0b:53:31:3e:17:6e:
                    3d:d5:66:6f:5d:cf:a9:92:63:32:df:f7:60:7b:66:
                    ca:b1:c5:ec:e0:70:ea:94:cf:fa:fe:1d:96:65:05:
                    07:17:54:09:37:fe:fa:df:a6:61:2d:6d:e7:c4:ee:
                    22:49:5e:47:d1:2e:7a:61:83:84:24:a4:cb:9e:bc:
                    4d:46:8e:ea:87:77:53:9f:e8:c8:72:36:45:a3:41:
                    30:00:93:ca:de:86:d8:ec:69:ca:05:b6:59:d3:b7:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:FD:F0:8A:04:90:62:C9:9D:3C:23:3E:BF:E6:53:DA:05:AD:C1
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:15:45:8b:35:aa:f3:32:c9:b2:54:44:3d:6e:d5:61:8e:
         a7:8c:1a:e2:30:79:54:02:97:db:92:8d:57:2f:c3:ba:80:76:
         1e:1f:07:f0:a1:7b:56:80:ce:60:62:61:44:04:ff:a2:b8:de:
         00:9f:d0:d8:6f:cc:cf:5e:34:ec:7c:a9:9a:95:dc:d2:00:89:
         ae:e7:bb:9e:f4:9d:25:7a:58:91:bc:9c:2d:33:a3:91:3a:d1:
         b2:75:d4:fd:91:99:b6:42:a2:e6:fa:d6:6b:95:46:93:39:ec:
         e0:ca:b3:26:53:03:14:39:63:cc:f9:33:c6:3e:38:a6:70:d2:
         70:2c:cb:75:bd:ce:52:a8:0a:c2:27:b3:e3:f0:9e:83:b9:1a:
         3c:a6:d5:75:a7:b7:c7:2b:01:a6:d9:12:1a:f9:3f:cc:1f:a9:
         93:ae:7a:60:83:4f:f6:45:c4:9f:7d:a0:16:9c:af:0a:7e:d1:
         e6:75:ff:ad:3a:e9:28:85:2e:ad:37:76:29:9b:2b:41:47:8e:
         5d:89:ac:ee:b2:5b:83:7f:71:5d:3a:f5:a3:9e:4b:fb:64:f2:
         80:ff:1a:9b:5a:47:df:ca:14:ce:34:f9:76:c7:2e:83:59:3a:
         19:1c:85:a2:7e:cd:e6:51:82:0c:ca:2b:27:4a:08:4e:de:a9:
         3d:bb:a1:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGak/FheE4jcE50F+KQhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh
MDNlY2MwHhcNMjYwNDE3MTEwMDQzWhcNMjYwNDE4MTEwMDQzWjAzMTEwLwYDVQQD
EyhkZjI5ZmRmMDhhMDQ5MDYyYzk5ZDNjMjMzZWJmZTY1M2RhMDVhZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknzyg6owpYxKtvoHAmEHW0mRK1qd
OZIaBuDciy3atRcMSkhzsvF3lyKD+3EMsAHE91k+AOLpvTOYR+QfBsRb/FW5l/Wc
rGv3rQaRTftb2a0Brq9yl7mULG3Q2dmFn1NfGPAvO64BoYrm5xySWF3NGFexCzFI
sur6Lb/VbVbxR2NdID/YLjkc6zattd6ZaCEhrSNX8b3KUxlGiaf+uxALUzE+F249
1WZvXc+pkmMy3/dge2bKscXs4HDqlM/6/h2WZQUHF1QJN/7636ZhLW3nxO4iSV5H
0S56YYOEJKTLnrxNRo7qh3dTn+jIcjZFo0EwAJPK3obY7GnKBbZZ07fM+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8p/fCKBJBiyZ08Iz6/5lPaBa3BMB8GA1UdIwQY
MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt
Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz
LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJgVRYs1
qvMyybJURD1u1WGOp4wa4jB5VAKX25KNVy/DuoB2Hh8H8KF7VoDOYGJhRAT/orje
AJ/Q2G/Mz1407HypmpXc0gCJrue7nvSdJXpYkbycLTOjkTrRsnXU/ZGZtkKi5vrW
a5VGkzns4MqzJlMDFDljzPkzxj44pnDScCzLdb3OUqgKwiez4/Ceg7kaPKbVdae3
xysBptkSGvk/zB+pk656YINP9kXEn32gFpyvCn7R5nX/rTrpKIUurTd2KZsrQUeO
XYms7rJbg39xXTr1o55L+2TygP8am1pH38oUzjT5dscug1k6GRyFon7N5lGCDMor
J0oITt6pPbuhOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:58 2026 by rpki-client